Orta CVSS 6.5 PoC var

CVE-2020-8492: Python: denetimsiz kaynak tüketimi

Yayın: 30 Ocak 2020 22:15 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

Özet bilgiler

Ürün: Python Python
CVSS v3.1: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS: %6,62 (yüzdelik 94)
CWE: CWE-400
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
python-python	2.7.0	2.7.17	—
python-python	3.5.0	3.5.9	—
python-python	3.6.0	3.6.10	—
python-python	3.7.0	3.7.6	—
python-python	3.8.0	3.8.1	—
opensuse-leap	15.1	15.1	—
canonical-ubuntu-linux	12.04	12.04	—
canonical-ubuntu-linux	14.04	14.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	19.10	19.10	—
canonical-ubuntu-linux	20.04	20.04	—
fedoraproject-fedora	31	31	—
fedoraproject-fedora	32	32	—
debian-debian-linux	9.0	9.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları